URLhaus Database

You are currently viewing the URLhaus database entry for http://89.32.41.16/bins/parm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3840655
URL: http://89.32.41.16/bins/parm6
URL Status:flame Online (spreading malware for 1 month, 18 days, 20 hours, 57 minutes)
Host: 89.32.41.16
Date added:2026-05-06 19:19:20 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-05-06 19:20:15 UTC to abuse{at}hostmaze[dot]com)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-20n/aelf 9fa6d2fd9142a363ae55e41e63bd8c979b402ed3536f1a786f5b86490238c5een/aMirai
2026-06-18n/aelf b495523dbb070639fadef60efb84c9a2c9da138e39c3acc51221c862c4f83506n/aMirai
2026-06-16n/aelf 792ca1b4795e08db736ca9dbca283ae481baeadd08defc85a7e4dd59995c146en/aMirai
2026-06-16n/aelf da89b594cf205355ea1fb08c0d63b39cf30b266a1c1bc3136808b5be495d10a3n/aMirai
2026-06-09n/aelf c9cba6112c73bd56fc11ff9d0ab1070e3e55de850461360f90d7b7af5ee3ebdcn/aMirai
2026-05-07n/aelf 05445d58ae969fc9f98eeef8c2f7ba40ddbdbc6085934a05763e8c82584c26bfn/aMirai
2026-05-06n/aelf 5ec1af1f7d09d71303995275154ed6747b89375e4c7b912e548142ef80ef57a6n/aMirai